Free online Security Tools
Passwords, hashes and keys generated locally with Web Crypto. 12 tools, all free and private.
12 tools 100% free No installation Privacy focused
Password GeneratorGenerate strong, random passwords with custom length, symbols and numbers using secure browser crypto.Hash Generator (SHA-256, SHA-1, MD5)Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes from text or files.Encrypt & Decrypt TextEncrypt secret messages with a password using AES-256-GCM, and decrypt them back. Runs fully in your browser.PBKDF2 Hash GeneratorDerive PBKDF2 hashes/keys with SHA-256 or SHA-512, custom salt, iterations and key length.UUID ValidatorValidate UUIDs/GUIDs and detect their version and variant. Check many at once.Credit Card Number ValidatorCheck whether a card number is correctly formed (Luhn check) and detect the card network. Nothing is stored or sent.Password Strength CheckerCheck how strong your password is, estimate crack time, and get tips to make it stronger.Bcrypt Hash Generator & CheckerCreate bcrypt password hashes with a chosen cost factor, and verify a password against an existing hash.HMAC GeneratorGenerate HMAC signatures with SHA-1, SHA-256, SHA-384 or SHA-512 in hex or Base64 — for webhooks and APIs.Random String & API Key GeneratorGenerate secure random strings, API keys and secret tokens in hex, Base64, alphanumeric or custom characters.Passphrase GeneratorCreate strong but easy-to-remember passphrases made of random words, like "orbit-maple-candle-river".RSA Key Pair GeneratorGenerate RSA 2048, 3072 or 4096-bit public and private key pairs in PEM format, locally in your browser.
No tools match your search.
Strong passwordsCryptographically random passwords and passphrases.
HashesSHA, MD5, bcrypt, HMAC and PBKDF2.
EncryptionEncrypt and decrypt text with a password.
Never sentSecrets are created in your browser.
Frequently asked questions
Quick answers about our security tools.
Are generated passwords sent anywhere?
No. They are created with your browser’s secure random generator and never leave your device.
Is MD5 safe for passwords?
No. Use bcrypt or PBKDF2 for storing passwords. MD5 and SHA are fine for file checksums.
Can you recover text I encrypted?
No. Only someone with the password can decrypt it, so keep the password safe.
How long should a password be?
At least 14–16 characters, or a passphrase of 4–5 random words.